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Remarks 

Reconsideration of this Application is respectfully requested. 

Upon entry of the foregoing amendment, claims 1-6, 8-13, and 15-19 are pending 
in the application, with claims 1, 6 and 13 being the independent claims. Claims 1-6, 8- 
13, and 15-19 are sought to be amended to clarify the claimed subject matter. Claims 7 
and 14 are sought to be cancelled without prejudice or disclaimer of the subject matter 
therein. These changes are believed to introduce no new matter, and their entry is 
respectfully requested. 

Based on the above amendment and the following remarks, Applicants 
respectfully request that the Examiner reconsider all outstanding objections and 
rejections and that they be withdrawn. 

Objections to the Claims 

Claims 12 and 19 have been amended to correct an informality identified by the 
Examiner on page 2 of the Office Action. Applicants respectfully request that the 
objections be withdrawn. 

Rejection under 35 U.S.C. § 101 

On page 2 of the Office Action, the Examiner rejected claims 13-19 under 35 
U.S.C. § 101 for allegedly being directed to non-statutory subject matter. Applicants 
respectfully traverse this rejection. 

Although Applicants believe the claims represent patentable subject matter as 
currently pending in the application, Applicants have amended claim 1 3 to recite a 
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tangible data storage device. In 1995, the Commissioner of Patents and Trademarks 

conceded to the U.S. Court of Appeals for the Federal Circuit "that computer programs 

embodied in a tangible medium, such as floppy diskettes, are patentable subject matter 

under 35 U.S.C. § 101." See/* re Beauregard, 53 F.3d 1583 (Fed. Cir. 1995). 

Amended claim 13 falls within what the Commissioner of Patents and Trademarks had 

conceded was patentable subject matter. Dependent claims 15-19 depend from claim 13 

and should similarly be found allowable. Accordingly, Applicants respectfully request 

that the Examiner reconsider and withdraw this rejection of claims 15-19 and find them 

allowable. 

Dependent claim 14 is sought to be cancelled, and therefore the rejection of claim 
14 under 35 U.S.C. § 101 is rendered moot. 

Rejections under 35 U.S.C. § 112 

On page 3 of the Office Action, the Examiner rejected claims 6-19 under 35 
U.S.C. § 1 12, second paragraph, as allegedly being indefinite. Independent claims 6 and 
1 3 have been amended to recite "an electronic document" in the preamble. Applicants 
respectfully request that the rejection of claims 6, 8-13, and 15-19 be reconsidered and 
withdrawn. 

Dependent claims 7 and 14 are sought to be cancelled, and therefore the rejection 
of claims 7 and 14 under 35 U.S.C. § 1 12 is rendered moot. 

The Examiner additionally rejected claims 1-5 under 35 U.S.C. § 1 12, second 
paragraph, as allegedly omitting an essential step. Although the Applicants believe the 
originally filed claims meet this section of the statute, Claim 1 has been amended to 
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additionally recite the step of "associating the electronic document with at least one of 

the states of the process-driven security policy to impose access restrictions on an 

electronic document." Thus, Applicants submit that the claim does not omit any 

essential steps. Applicants respectfully request that the rejection of claims 1-5 be 

reconsidered and withdrawn. 

Rejections under 35 U.S.C. § 102 

Claims 1-9. 11-16. 18. and 19 over Lesser et al. 

The Examiner has rejected claims 1-9, 1 1-16, 18, and 19 under 35 U.S.C. § 
102(e) as allegedly being anticipated by U.S. Patent Application No. 2005/0028006 Al 
to Leser et al. ("Leser"). For the reasons set forth below, Applicants respectfully submit 
that Leser does not anticipate claims 1-9, 11-16, 18, and 19. Accordingly, Applicants 
respectfully traverse. 

Independent claim 1 recites, inter alia, the step of "changing the state of the 
process-driven security policy for the electronic document automatically based on an 
event, wherein the changed state is based on a transition rule associated with the event." 

For example, in an embodiment, state transitions are activated without the 
interaction of a user or administrator. (Published Application of the instant application, 
para. [0050]). In an additional embodiment, an individual user or administrator is able to 
activate the state transition by causing a triggering event to occur. (Published 
Application of the instant application, para. [0050]). Applicants submit that Leser 
nowhere teaches or suggests event-driven state changes. 
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Applicants note that Leser is a non-provisional application bearing a filing date of 
May 28, 2004, which is after the September 30, 2003 filing date of the present 
application. Leser claims priority to Provisional Application No. 60/475,109 ("Leser 
Provisional") filed on June 2, 2003. For the purposes of a rejection under 35 U.S.C. § 
102(e), any subject matter in Leser used to reject the present application must be found 
in the Leser Provisional. 

The Leser Provisional discloses logic used to "[transfer] a data object 
(represented by a document) between control policies." (Leser Provisional, p. 31, 11. 5- 
6). This process involves a user activating a "droplet control" to select a new control 
policy for the transfer. (Leser Provisional, p. 31, 11. 14-16). As Leser requires that a user 
perform a specific, explicit action to transfer a data object to a new control policy, it 
cannot be the case that Leser teaches or suggests the use of an "event" to "[change] the 
state of the process-driven security policy, wherein the changed state is based on a 
transition rule associated with the event," as recited in independent claim 1 . 
Accordingly, Applicants respectfully traverse, and reconsideration and withdrawal of this 
rejection is therefore respectfully requested. 

Claims 2-5 are also not anticipated by Leser for similar reasons as independent 
claim 1 from which they depend, and further in view of their own respective features. 
Reconsideration and withdrawal of this rejection for these claims is therefore respectfully 
requested. 

Independent claims 6 and 13 have been rejected as allegedly being anticipated by 
Leser for similar grounds as independent claim 1. Independent claims 6 and 13 similarly 
recite "subsequently changing the state of the process-driven security policy for the 
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electronic document automatically based on an event, wherein the changed state is based 
on a transition rule associated with the event," and are therefore not anticipated by Leser 
for at least the same reasons stated above with regard to independent claim 1, and further 
in view of their own respective features. Reconsideration and withdrawal of this 
rejection for these claims is therefore respectfully requested. 

Claims 8, 9, 11, and 12 are also not anticipated by Leser for similar reasons as 
independent claim 6, from which they depend, and further in view of their own 
respective features. Likewise, claims 15, 16, 18, and 19 are not anticipated by Leser for 
similar reasons as independent claim 13, from which they depend, and further in view of 
their own respective features. Reconsideration and withdrawal of this rejection for these 
claims is therefore respectfully requested. 

Claims 7 and 14 are sought to be cancelled, and therefore the rejection of claims 
7 and 14 under 35 U.S.C. § 102(e) over Leser is rendered moot. 

Claims 1 and 3-5 over Venkatesan et al. 

The Examiner has rejected claims 1 and 3-5 under 35 U.S.C. § 102(e) as 
allegedly being anticipated by U.S. Patent No. 6,801,999 to Venkatesan et al. 
("Venkatesan"). Although the Examiner states claims 1-5 in section 10 of the Office 
Action, the Examiner does not state claim 2 in the body of the rejection. Thus, 
Applicants assume claim 2 is not part of this rejection. For the reasons set forth below, 
Applicants respectfully submit that Venkatesan does not anticipate claims 1 and 3-5. 
Accordingly, Applicants respectfully traverse. 
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Independent claim 1 recites, inter alia, the step of "creating a process-driven 
security policy having a plurality of states, with each of the states having a different set 
of access restrictions." 

On page 6 of the Office Action, the Examiner states that the process of 
"generating a license indicating a content can be accessed a certain number of times or 
for a certain time period" in Venkatesan is akin to a "process-driven security policy 
having a plurality of states," as recited in independent claim 1. (Office Action, p. 6). 
Applicants disagree. 

The license generation process of Venkatesan cannot be described as a "process- 
driven security policy," as recited in independent claim 1 . For example, in an 
embodiment, a process-driven security policy is a "workflow" defining a "series of states 
through which files can move." (see, e.g., Published Application of the instant 
application, paragraph [0035]). Assuming, arguendo, that the different licenses of 
Venkatesan define different states of a security policy, Venkatesan nowhere teaches or 
suggests that the security policy is "process-driven," as recited in the claims. 

Moreover, each of the licenses of Venkatesan are arguably not different states of 
a security policy, but merely a set of rights with no relation to each other, such as, for 
example, the right to play a song "just once," "a certain number of times," or "on an 
unlimited basis." (Venkatesan, col. 2, 11. 58-67). These rights are based on a license 
obtained separately from the secured object, and Venkatesan discloses that the license 
may be granted subject to "a request to obtain a license to access and use a corresponding 
object" where the object has been "previously downloaded from the publisher." 



Atty. Dkt. No. 2222.5430000 



- 13- NATH et al. 

Appl.No. 10/677,049 

(Venkatesan, col. 30, 11. 16-18). Therefore, Venkatesan does not describe "states" of a 

security policy, as recited in claim 1, but merely individual security policies. 

Since Venkatesan does not teach or suggest, at a minimum, a process-driven 
security policy, Venkatesan also cannot teach or suggest "associating the electronic 
document with at least one of the states of the process-driven security policy to impose 
access restrictions on an electronic document" and "changing the state of the process- 
driven security policy for the electronic document automatically based on an event, 
wherein the changed state is based on a transition rule associated with the event," as 
recited in independent claim 1 . Accordingly, Applicants respectfully traverse, and 
reconsideration and withdrawal of this rejection is therefore respectfully requested. 

Claims 3-5 are also not anticipated by Venkatesan for similar reasons as 
independent claim 1, from which they depend, and further in view of their own 
respective features. Also, even assuming claim 2 was part of this rejection, as it depends 
from claim 1, and further in view of its own respective features, it is not anticipated by 
Venkatesan. Reconsideration and withdrawal of this rejection for these claims is 
therefore respectfully requested. 

Claims 6-19 over Downs et al. 

The Examiner has rejected claims 6-19 under 35 U.S.C. § 102(b) as allegedly 
being anticipated by U.S. Patent No. 6,226,618 to Downs et al. ("Downs"). For the 
reasons set forth below, Applicants respectfully submit that Downs does not anticipate 
claims 6-19. Accordingly, Applicants respectfully traverse. 
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Independent claim 6 recites, inter alia, the step of "providing at least one process- 
driven security policy to a client machine, the process-driven security policy having a 
plurality of states associated therewith." 

The Examiner uses Downs to reject independent claim 6 in a similar manner as 
Venkatesan was used to reject independent claim 1, arguing that the process of 
generating "a license indicating a content can be accessed a certain number of times or 
for a certain time period" is akin to a "process-driven security policy having a plurality 
of states associated therewith." (Office Action, p. 7). Applicant disagrees. 

For similar reasons as discussed above with respect to Venkatesan, the license 
generation process of Downs cannot be described as a "process-driven security policy," 
as recited in independent claim 6. For example, in an embodiment, a process-driven 
security policy is a "workflow" defining a "series of states through which files can 
move." (see, e.g., Published Application of the instant application, para. [0035]). 
Assuming, arguendo, that the different licenses of Downs define different states of a 
security policy, Downs nowhere teaches or suggests that the security policy is "process- 
driven," as recited in claim 6. 

Moreover, Downs also does not teach or suggest the step of "subsequently 
changing the state of the process-driven security policy for the electronic document 
automatically based on an event, wherein the changed state is based on a transition rule 
associated with the event," wherein the "states of the process-driven security policy" are 
used to "impose access restrictions on an electronic document," as recited in independent 
claim 6. Downs discloses restriction of end-user rights through the use of "usage 
conditions," such as, for example, a rental term or number of views permitted. (Downs, 
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col. 59, 11. 7-66). The Examiner states that tracking usage data to enforce these end-user 
rights is akin to "changing the state" of a "process-driven security policy," as recited in 
independent claim 6. (Office Action, pp. 7-8). However, Downs does not disclose 
changing any state (and thereby potentially the access restrictions) of a document, but 
merely tracks the usage data in order to enforce an existing security policy. Accordingly, 
Applicants respectfully traverse, and reconsideration and withdrawal of this rejection for 
this claim is therefore respectfully requested. 

Independent claim 13 has been rejected as allegedly being anticipated by Downs 
for similar grounds as independent claim 6. Independent claim 13 similarly recites 
"computer program code for providing at least one process-driven security policy to a 
client machine, the process-driven security policy having a plurality of states associated 
therewith," and is therefore not anticipated by Downs for at least the same reasons stated 
above with regard to independent claim 6, and further in view of its own features. 
Reconsideration and withdrawal of this rejection for this claim is therefore respectfully 
requested. 

Claims 8-12 are also not anticipated by Downs for similar reasons as independent 
claim 6, from which they depend, and further in view of their own respective features. 
Likewise, claims 15-19 are not anticipated by Downs for similar reasons as independent 
claim 13, from which they depend, and further in view of their own respective features. 
Reconsideration and withdrawal of this rejection for these claims is therefore respectfully 
requested. 

Claims 7 and 14 are sought to be cancelled, and therefore the rejection of claims 
7 and 14 under 35 U.S.C. § 102(e) over Downs is rendered moot. 
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Rejections under 35 U.S.C. §103 
Claims 10 and 17 

The Examiner has rejected claims 10 and 17 under 35 U.S.C- § 103(a) as 
allegedly being obvious over Leser in view of U.S. Patent Application No. 
2003/0217264 Al to Martin et al. ("Martin"). Applicants respectfully traverse this 
rejection. 

As discussed above with regard to independent claims 6 and 13, Leser fails to 
teach or suggest the step of "subsequently changing the state of the process-driven 
security policy for the electronic document automatically based on an event, wherein the 
changed state is based on a transition rule associated with the event." The Martin 
reference is not used to teach or suggest this feature, and also fails to teach or suggest 
this absent feature, and thus does not cure the deficiencies of Leser. Martin discloses the 
use of "action items" to indicate that a change to another step in a "workflow" should 
occur. (Martin, para. [0014]). An "access control list" is operable to "dynamically 
change user permissions to reflect the current step in the sequence of action items." 
(Martin, para. [0020]). While the "action items" of Martin are operable to change steps 
in a workflow, the action items are not "events," as claimed. Rather, Martin describes 
action items as "the actions required in the workflow." (Martin, para. [0015]). 

On the other hand, the event-driven state change of the claims is different. For 
example, in the instant application events are used to trigger transition rules between two 
states, and have no bearing on any particular "actions required in the workflow," as in 
Martin. (Published Application of the instant application, para. [0072]). As a 
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consequence, whereas the "action items" of Martin are tied to progress through a 
"workflow," events in the claims allow state changes to occur irrespective of a workflow, 
or in conjunction with a workflow. As an example of events occurring irrespective of 
workflow, the instant application illustrates a transition rule using an internal event, 
whereby when a system clock is set to "September 1, 2008," the state of a document is 
transitions from RETAIN to DELETE. (Published Application of the instant application, 
para. [0073]). As stated in independent claim 6, this is a "transition rule" (i.e., transition 
from the "RETAIN" state to the "DELETE" state) that is "associated with [an] event" 
(i.e., the date is "September 1, 2008"), and does not operate as "action items" in a 
"workflow" as in Martin. On the contrary, the "workflow" process of Martin is task- 
based, requiring the "completion of [a] task specified in [a] workflow" in order to update 
a document. (Martin, para. [0005]). 

Accordingly, Leser and Martin, either alone or in combination, do not teach or 
suggest each and every feature of independent claims 6 and 13, and thus cannot be used 
to establish a prima facie case of obviousness. Claims 10 and 17 depend from claims 6 
and 13, respectively, and are therefore not rendered obvious by Leser and Martin for at 
least the same reasons as independent claims 6 and 13, and further in view of their own 
respective features. Reconsideration and withdrawal of this rejection for these claims is 
therefore respectfully requested. 

Claim 2 

The Examiner has rejected claim 2 under 35 U.S.C. § 103(a) as allegedly being 
obvious over Venkatesan. Applicants respectfully traverse this rejection. 
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As discussed above with regard to independent claim 1, Venkatesan fails to teach 

or suggest the step of "creating a process-driven security policy having a plurality of 

states, with each of the states having a different set of access restrictions." Claim 2 

depends from claim 1, and is therefore not rendered obvious by Venkatesan for at least 

the same reasons as independent claim 1 , and further in view of its own features. 

Reconsideration and withdrawal of this rejection for this claim is therefore respectfully 

requested. 

Double Patenting Rejection 

On page 10 of the Office Action, the Examiner provisionally rejected claims 6, 7, 
12-14, and 19 under the judicially created doctrine of obviousness-type double patenting 
over claims 21, 22, 24, and 28 of co-pending Application no. 10/676,474. 

Pursuant to M.P.E.P. § 804(I)(B), since co-pending Application No. 10/676,474 
has not been allowed, the Examiner should maintain the double patenting rejection in 
this instant application as a 'provisional' double patenting rejection, which can be 
converted into a double patenting rejection when the co-pending application issues as a 
patent. Applicants will appropriately address the provisional double patenting rejection 
in the event it is converted to an actual double patenting rejection pursuant to M.P.E.P. § 
804(I)(B) after the co-pending application issues as a patent. 

Conclusion 

All of the stated grounds of objection and rejection have been properly traversed, 
accommodated, or rendered moot. Applicants therefore respectfully request that the 
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Examiner reconsider all presently outstanding objections and rejections and that they be 
withdrawn. Applicants believe that a full and complete reply has been made to the 
outstanding Office Action and, as such, the present application is in condition for 
allowance. If the Examiner believes, for any reason, that personal communication will 
expedite prosecution of this application, the Examiner is invited to telephone the 
undersigned at the number provided. 

Prompt and favorable consideration of this Amendment and Reply is respectfully 
requested. 



Respectfully submitted, 
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